AED Readiness Compliance SaaS for Multi-Site Organizations and Service Companies
An estimated 2.5 million automated external defibrillators are deployed across American schools, gyms, airports, offices, and churches. Most of them will never be used, and that is by design: AEDs exist as insurance against the roughly 350,000 out-of-hospital cardiac arrests that strike every year in the United States, killing nine out of ten victims when no defibrillation is available. But deployment is not readiness. A University of Arizona study examining 1,150 AED-related fatalities over 15 years found that 23% were caused by dead batteries and another 24% by failed pads and connectors. Nearly half the deaths involving a device specifically purchased to prevent death were caused by basic maintenance failures. The compliance layer that should connect AED owners, third-party service companies, state health departments, and insurance carriers runs on paper checklists clipped to cabinet doors, monthly reminder emails that nobody opens, and vendor-specific portals that track only one manufacturer's devices. Connecting all four sides of this workflow into a single platform is a $180 million opportunity hiding behind a green status light that blinks even when the pads expired six months ago.
The Problem
Sudden cardiac arrest kills without warning. A healthy person collapses at a conference table, on a basketball court, in a church pew, at a school assembly. The heart's electrical system short-circuits into ventricular fibrillation, quivering uselessly instead of pumping blood. Brain damage begins within four minutes. Death follows within ten. CPR buys time, but defibrillation is the cure: an electric shock that resets the heart's rhythm. Without it, survival rates sit at 8-10%. With prompt defibrillation from an on-site AED, that number climbs to 50-74%.
That gap explains the AED proliferation of the last two decades. Over 20 states now mandate AEDs in schools, fitness centers, government buildings, or some combination. The Cardiac Arrest Survival Act of 2000 provided federal Good Samaritan protection for AED users and facility owners. Insurance carriers began offering premium discounts to buildings that deploy AEDs. The result: an estimated 2.5 million units scattered across approximately 1.4 million locations in the United States, from airport terminals to dental offices to Little League dugouts.
Buying an AED is easy. Keeping one alive requires ongoing work that almost nobody does well. Electrode pads dry out and lose adhesion over time; manufacturers set expiration dates at 18 to 30 months. Lithium batteries hold a shelf charge for four to seven years, but capacity degrades faster in cabinets exposed to temperature swings near building entrances or loading docks. Most states and the FDA require monthly visual inspections, annual professional checks, and immediate reporting of any device use. Someone must verify that the green status indicator is lit, the pads are sealed and within date, the battery level is adequate, and the accessory kit (razor, gloves, CPR mask, scissors) is complete.
In practice, that someone is a receptionist, a gym manager, a school nurse, or a facilities coordinator who inherited AED duties alongside seventeen other responsibilities. They check the cabinet when they remember. They log the inspection on a paper form clipped inside the door, or they don't log it at all. When pads expire, they order replacements if they notice. When batteries fail, they discover it during the next check, whenever that happens to be. The AED's green light continues blinking because the self-test verifies only the internal electronics, not whether the pads sealed to a patient's chest will actually conduct a shock or whether the battery has enough charge to deliver one.
The Readiness Gap: An Original Calculation
No public dataset counts how many deployed AEDs are actually ready to function. But we can triangulate from what we know.
Dr. Lawrence DeLuca's team at the University of Arizona examined over 40,000 AED-related adverse events reported to the FDA between 1993 and 2008. Among the 1,150 fatalities, 23% (approximately 265 deaths) were attributed to battery failure and 24% (approximately 276 deaths) to pad and connector problems. That is 47% of all AED-associated deaths caused by maintenance failures, not device design flaws, not operator error, not delayed response.
Scale that against today's landscape. The American Heart Association estimates over 350,000 out-of-hospital cardiac arrests annually, with roughly 25% presenting a shockable rhythm overall and approximately 60% in public locations. Bystander AED application rates have risen to about 18.8% of shockable public arrests, suggesting around 4,000 to 6,000 actual bystander AED deployments per year in the US. If 47% of AED failures stem from maintenance issues, and even a conservative 5% of attempted deployments encounter a non-functional device, that implies 200 to 300 incidents per year where someone reaches for a defibrillator, applies it to a dying person, and gets nothing.
Here is the calculation nobody runs. At an average AED purchase price of $1,500 and a replacement pad-and-battery kit costing $200 every two years, the annualized ownership cost per device is roughly $100/year in consumables alone (amortizing the $200 kit over 24 months, plus incidentals). For 2.5 million deployed units, that represents $250 million per year in consumable spend. If 40% of organizations are behind on replacements (a figure consistent with industry estimates from AED service companies), approximately $100 million in expired consumables are installed in devices right now, representing both wasted spend and readiness risk. The compliance management layer that would prevent this waste and ensure readiness costs a fraction of the consumable budget it protects, yet almost no organization runs one.
Where the Paper Trail Breaks Down
Consider a mid-size school district with 45 buildings and 120 AEDs deployed across campuses, gymnasiums, bus depots, and administrative offices. The district's risk management director is nominally responsible for AED compliance. In practice, a nurse or athletic trainer at each building performs monthly inspections. Or doesn't. The district has no way to verify which inspections were actually completed, which devices have current pads, or whether all 120 units passed their last self-test. The paper checklists stay at each building. Nobody aggregates them.
When the district's insurance carrier asks for AED compliance documentation at renewal time, the risk manager sends emails to 45 buildings requesting copies of inspection logs. Some respond within a week. Some never respond. The risk manager compiles what arrives, fills gaps with educated guesses, and submits a compliance attestation that is legally binding but empirically unreliable. If a student collapses on a basketball court and the gymnasium's AED fails because its pads expired four months ago, that attestation becomes Exhibit A in the wrongful death lawsuit.
The same pattern plays out in hotel chains with AEDs in every lobby and pool area, fitness franchises required by state law to maintain devices at each location, corporate campuses spanning multiple buildings, and healthcare systems with AEDs in every department. Scale multiplies the failure mode. A single-site operator can walk past the AED cabinet daily and notice the red warning light. A 200-location fitness chain cannot.
The Gap in the Market
Software for AED management exists, but it splits along manufacturer lines and serves only one side of the compliance workflow.
| Company | What They Do | What's Missing |
|---|---|---|
| ZOLL PlusTrac | Web-based AED program management with a CheckAED mobile inspection app. Tracks pad and battery expiration, schedules training, provides compliance dashboards. Integrates with ZOLL's device self-test data. | Built for ZOLL devices. Organizations with mixed fleets (Philips, Stryker, Cardiac Science, Defibtech) alongside ZOLL units must track non-ZOLL devices separately. No integration with third-party service companies or state regulatory reporting. |
| Cardio Partners LifeShield | AED compliance management at $100/year per device. Email reminders for monthly inspections, pad and battery expiration tracking, 24-hour helpline, medical director oversight documentation. | A reminder service, not a workflow platform. No mobile inspection app with photo verification. No multi-site aggregation for enterprise accounts. No integration with the service companies that actually perform quarterly maintenance visits. |
| SafetyCulture (iAuditor) | General-purpose inspection and audit platform with community-contributed AED checklist templates. Mobile forms, photo capture, reporting. | Generic inspection tool that knows nothing about AEDs specifically. No pad or battery expiration tracking, no device self-test integration, no state-specific compliance rules, no medical director workflow, no insurance documentation templates. |
| AED Manufacturer Apps (Philips HeartStart, Stryker, etc.) | Device-specific monitoring and self-test reporting for their own products. | Each works only with that manufacturer's devices. An organization that bought Philips AEDs for the main office in 2018 and Defibtech units for the warehouse in 2022 must run two separate systems. |
The structural failure mirrors the backflow testing market: every existing solution serves only one participant in a multi-party workflow. ZOLL PlusTrac serves ZOLL's sales channel. Cardio Partners serves its own retail customers. SafetyCulture serves inspectors who happen to also check AEDs. Nobody has built the vendor-agnostic platform that connects all four parties: the organization that owns the AEDs, the service company that maintains them, the state agency that regulates them, and the insurance carrier that underwrites the liability.
The Solution
A vendor-agnostic AED readiness platform where inspection data, consumable status, training records, and compliance documentation flow between all parties in a single system:
1. Organization dashboard ($6/device/month): Real-time compliance status for every AED across all locations, regardless of manufacturer. Pad and battery expiration countdown with automated reorder triggers at 90, 60, and 30 days before expiry. Monthly inspection scheduling with escalation when a check is overdue by more than 48 hours. State-specific compliance checklist templates for all 50 states. Insurance documentation package generated on demand for carrier renewals. Medical director review workflow for states that require physician oversight of AED programs (currently required or recommended in over 30 states). Training certification tracking for designated responders: who is CPR/AED certified, when each certification expires, and which building they are assigned to cover.
2. Inspector mobile app (free tier): QR code scan on AED cabinet opens the device record with pre-populated manufacturer, model, serial number, pad lot, and battery installation date. Inspector walks through a guided checklist: status indicator, pad packaging integrity, battery level (entered manually or pulled from connected devices), cabinet alarm test, accessory kit check. Photo verification required for each inspection. Submit, and the report flows simultaneously to the organization's dashboard, the medical director's review queue, and the compliance archive. Free for up to 10 devices per account per month, which covers solo inspectors and small facilities.
3. Service company portal ($99/month): Route planning for quarterly maintenance visits across client accounts. Parts inventory management: which pad models and battery types are needed for each upcoming visit. Automated quoting and invoicing. Client-facing compliance reports that demonstrate the service company's value during contract renewal conversations. White-label option so the service company's brand appears on inspection reports and client dashboards. This is the wedge for growth: AED service companies are the trusted advisors who walk into facilities every quarter, and if the platform makes their business more efficient, they will bring their clients onto it.
4. Incident reporting module (included): When an AED is used in a cardiac arrest event, the platform guides the post-event documentation required by most states: date, time, patient outcome, device data download, replacement supplies ordered. Auto-generates the state-mandated incident report in the correct format for the jurisdiction. This module serves both the legal and medical needs: the organization gets documentation for its liability file, and the medical director gets the clinical data required for program oversight.
Revenue Model
| Revenue Stream | Amount | Notes |
|---|---|---|
| Organization SaaS (per device/month) | $6 | Volume discounts at 100+ and 500+ devices. Annual contract, billed monthly or quarterly. Includes all dashboard features, compliance reporting, and training tracking. |
| Service company subscription (monthly) | $99 | Route planning, invoicing, inventory, client reporting. White-label upgrade: $149/month. |
| Inspector free tier overage (per inspection) | $1.50 | Beyond 10 devices/month on free tier. Incentivizes upgrade to service company subscription. |
| Consumable marketplace commission | 8-12% | When the platform triggers a pad or battery reorder, the organization can purchase through the marketplace from authorized distributors. Platform takes a referral commission. |
| Insurance compliance package | $199/year | Annual compliance attestation package with audit trail, inspection history, and training records. For organizations with more than 50 devices. |
Unit economics on a 200-device school district: Annual organization SaaS revenue at $6/device/month: $14,400. Consumable marketplace commissions (estimated $200/device/2-year cycle, 10% take rate, half the fleet ordering in any given year): $2,000. Insurance compliance package: $199. Total revenue per mid-size school district: approximately $16,599/year. Customer acquisition cost for a school district (conference presence at ASBO and state school board associations, inside sales): estimated $4,000-6,000. Payback period: under six months. Service company subscriptions are additive: 50 service companies at $99/month yields $59,400/year in SaaS revenue with near-zero marginal cost.
Market Size
TAM: Industry estimates place the US AED installed base at approximately 2.5 million units across 1.4 million locations. The global AED hardware market was valued at $1.73 billion in 2025, with public-access units growing at 10.25% CAGR. At $6/device/month ($72/year) for the organization SaaS alone: $180M/year. Adding service company subscriptions, marketplace commissions, and insurance compliance packages: approximately $250M total addressable.
That 2.5 million installed-base figure carries meaningful uncertainty. No central registry of deployed AEDs exists in the United States. The number derives from cumulative sales data reported by major manufacturers (Philips, ZOLL/Asahi Kasei, Stryker, Cardiac Science, Defibtech) adjusted for an estimated 8-10 year average device lifespan and an unknown decommissioning rate. The actual functional installed base could be lower (devices purchased a decade ago and never replaced) or higher (the post-COVID acceleration in AED purchases for workplaces and schools pushed deployment rates above historical trends). A more conservative estimate of 1.8 million functional units yields a TAM of $130M.
SAM: Multi-site organizations with 10 or more AEDs represent the initial addressable market, because single-device facilities rarely invest in compliance software. This segment includes school districts (approximately 13,000 in the US with an average of 6-10 AEDs per district), fitness chains, hotel and resort chains, corporate campuses, hospital systems (AEDs in non-clinical areas), houses of worship with large campuses, and government facilities. Estimated devices in multi-site organizations: 800,000 to 1.2 million units. At $72/year: $58-86M/year in organization SaaS, plus service company and marketplace revenue.
SOM (year 3): 300 organizational accounts averaging 40 devices each (12,000 total devices) at $72/year = $864K organization SaaS. 80 service company subscriptions at $99/month = $95K. Marketplace commissions: $120K. Total: approximately $1.1M ARR. That represents roughly 1% penetration of the multi-site SAM.
Why Now
Post-COVID AED neglect created a crisis. During 2020 and 2021, millions of AEDs sat in empty office buildings, closed gyms, and shuttered schools for 12 to 18 months with no inspections. Pads expired. Batteries drained. When facilities reopened, many organizations discovered their AED programs had lapsed entirely. The FDA issued updated guidance on AED maintenance and inspection protocols in response. This created both urgency (facilities needing to rebuild compliance programs from scratch) and awareness (risk managers who previously treated AED maintenance as a background task now understand the liability exposure).
State mandates are expanding. New York, California, Illinois, and Florida have strengthened AED requirements in recent years, extending mandates to fitness centers, schools, and certain commercial buildings. Oregon's 2023 law requires AEDs in all public schools and mandates that school districts establish maintenance protocols. Each new mandate creates a cohort of newly regulated organizations that need compliance infrastructure. The patchwork of state requirements, each with different inspection frequencies, reporting formats, and medical director requirements, makes centralized compliance management increasingly valuable as organizations operate across state lines.
Insurance carriers are tightening requirements. Property and casualty insurers have begun requesting documented AED maintenance records as part of policy renewals, particularly for educational institutions, fitness facilities, and hospitality properties. An undocumented AED program is increasingly treated as a liability gap rather than a safety asset, because a deployed AED that fails during use creates greater legal exposure than having no AED at all: it demonstrates awareness of the risk combined with negligence in the response.
AED-as-a-Service is growing. Mordor Intelligence reports that AED-as-a-Service models are spreading, bundling devices, consumables, and training into annual subscription fees. This model aligns perfectly with SaaS compliance management because both the hardware provider and the customer benefit from centralized tracking. AED-as-a-Service providers become a natural distribution channel: when they sell a subscription, the compliance platform comes bundled.
Startup Costs
| Category | Cost | Notes |
|---|---|---|
| Platform engineering (12 months) | $280K | 2 backend + 1 frontend + 1 mobile developer. Multi-tenant SaaS with role-based access (org admin, site coordinator, inspector, service company, medical director). Mobile inspection app (iOS/Android) with QR scanning and photo capture. Dashboard with compliance status, expiration tracking, and reporting. |
| State regulatory research (all 50 states) | $35K | Contract compliance researcher. Each state's AED requirements: mandatory placement, inspection frequency, medical director requirements, incident reporting format, Good Samaritan protections, training requirements. Build the compliance rule engine. |
| AED device database | $20K | Catalog every AED model from every manufacturer: pad types, battery types, expiration cycles, self-test protocols, FDA recall history. This database is the moat. |
| Pilot program (20 organizations, 6 months) | $25K | Free platform access for pilot accounts. Mix of school districts, fitness chains, and corporate campuses. Dedicated onboarding support. Goal: validate inspection completion rates and consumable reorder conversion. |
| Sales and marketing (year 1) | $40K | ASBO conference (school business officers), IHRSA (fitness industry), NFPA conference, state school board association meetings. Content marketing targeting risk managers and facilities directors. |
| Medical director network | $15K | Build a referral network of physicians willing to serve as AED program medical directors. Many organizations struggle to find a physician for this role. The platform can match them, creating an additional value-add and potential revenue stream. |
| Security and compliance | $20K | SOC 2 Type 1. While AED inspection data is not PHI under HIPAA (no patient information), enterprise customers and school districts expect security audits. |
| Operating buffer (12 months) | $30K | Cloud hosting, customer support, legal review of state compliance content. |
| Total | $465K |
Limitations
The 2.5 million installed-base estimate is not independently verified. No federal agency tracks AED deployments, and manufacturer sales data includes units sold internationally, to government stockpiles, and as replacements for decommissioned devices. The actual number of functioning, accessible public-access AEDs in the United States could be anywhere from 1.5 million to 3.5 million. The TAM calculation scales linearly with this number, so a significant downward revision would proportionally shrink the market opportunity.
The DeLuca study's fatality data covers 1993-2008, a period when AED technology was less mature and maintenance awareness was lower. Modern AEDs have longer battery lives, better self-test diagnostics, and more prominent expiration warnings. The 47% maintenance-failure rate may overstate the current problem. However, FDA's MAUDE database continues to receive reports of AED failures during cardiac arrest events, suggesting the core issue persists even if the magnitude has shifted.
The $6/device/month price point assumes willingness to pay among organizations that have historically spent zero on AED compliance management beyond the cost of the paper checklist itself. Many school districts and small businesses will view compliance software as an unnecessary expense until they experience a near-miss or face an insurance claim. The sales cycle requires educating buyers about a risk they have been successfully ignoring, which is harder than selling to buyers who already recognize they have a problem.
The consumable marketplace commission model depends on capturing the purchasing decision at the moment of reorder. Many organizations have existing purchasing relationships with medical supply distributors or buy pads and batteries directly from the AED manufacturer. Diverting even a fraction of this spend through the platform will require competitive pricing and frictionless checkout, neither of which is guaranteed.
Strongest Counterargument
ZOLL already operates PlusTrac, a purpose-built AED program management platform with mobile inspection capability, compliance dashboards, and automated alerting. ZOLL is a subsidiary of Asahi Kasei Corporation, a $20 billion conglomerate with the resources to expand PlusTrac to support non-ZOLL devices if the market opportunity justified it. PlusTrac has years of operational data, established relationships with large AED program operators, and integration with ZOLL's device telemetry that no third-party platform can replicate. If vendor-agnostic AED compliance management is a real market, ZOLL is better positioned to capture it than any startup, because they already have the product, the customers, and the brand credibility in emergency cardiac care.
The counterpoint has two parts. First, expanding PlusTrac to support competitors' devices contradicts ZOLL's business model. ZOLL sells AEDs. PlusTrac exists to make ZOLL's sales proposition stronger: "Buy our devices and you get compliance management included." Supporting Philips and Defibtech devices in PlusTrac would remove a competitive advantage that helps ZOLL win hardware deals. ZOLL's incentive is to keep PlusTrac proprietary, not to open it. Second, the AED compliance market's real growth comes from multi-site organizations that already have mixed fleets, because those are the accounts large enough to justify SaaS spend. A school district that bought Philips AEDs in 2016 and Cardiac Science units in 2022 will not switch all 120 devices to ZOLL just to use PlusTrac. They need a platform that works with what they have. ZOLL can't serve that need without undermining its own hardware sales, which is exactly the structural gap that creates the opportunity for a vendor-agnostic entrant.
What You Can Do
If you're a facilities director or risk manager: Walk to your nearest AED cabinet right now. Open it. Check the pad expiration date and the battery indicator. If the pads expired more than three months ago or the battery indicator shows anything other than full charge, your AED may not function in an emergency. Now ask yourself: do you know the status of every other AED in your portfolio? If the answer is no, you have a compliance gap. At minimum, create a spreadsheet listing every AED by location, manufacturer, model, serial number, pad expiration date, and battery installation date. Schedule a calendar reminder every 30 days to update it. This costs nothing and is infinitely better than the paper checklist in the cabinet that nobody reviews.
If you're an AED service company: Calculate how many hours per month your technicians spend on documentation: filling out paper inspection forms, scanning or photographing them, emailing them to clients, and responding to client requests for compliance records. If that number exceeds 10 hours per month, a $99/month platform that automates the documentation and gives your clients a real-time compliance dashboard pays for itself immediately. The harder sell is that your clients will increasingly demand digital compliance records as insurance carriers tighten requirements. Being the service company that already provides this capability positions you to win contracts against competitors who still hand-deliver paper forms.
If you're building this: Start with school districts. They have concentrated buying power (one contract covers 50-200 devices), regulatory pressure (state mandates are expanding), and acute liability awareness (a student death from a failed AED would be front-page news). The device database is the moat: every AED model, every pad variant, every battery type, every state's regulatory requirements, meticulously cataloged. Nobody will replicate that work for fun. Once you have 50 school districts on the platform, the service companies that maintain those districts' AEDs will adopt because their clients already use it. Network effects compound from there.
The Bottom Line
The United States spent billions deploying AEDs to public spaces because the evidence is overwhelming: early defibrillation saves lives at rates that make every other intervention look marginal by comparison. But buying the device was the easy part. Keeping it ready to function requires ongoing maintenance that most organizations handle with the same rigor they apply to checking the break room coffee supply. The result is a nationwide fleet of life-saving devices in which an unknowable but clearly significant percentage will fail when someone's heart stops beating. The compliance infrastructure that should prevent this failure exists only in fragments: vendor-specific portals, generic inspection apps, paper checklists that nobody audits. Whoever stitches these fragments into a single vendor-agnostic platform that connects the organization, the inspector, the service company, the medical director, and the insurance carrier will own the workflow that determines whether 2.5 million AEDs are medical devices or wall decorations. At $6 per device per month, the revenue model is modest. The lives at stake are not.